CVE-2018-10578

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.30%

Published

May 2, 2018

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect validation of the "old password" field in the change password form allows an attacker to bypass validation of this field.

Weaknesses (CWE)

CWE-20

Affected Products (8)

watchguard · ap200_firmware (up to 1.2.9.15)vulnerable

watchguard · ap200

watchguard · ap102_firmware (up to 1.2.9.15)vulnerable

watchguard · ap102

watchguard · ap100_firmware (up to 1.2.9.15)vulnerable

watchguard · ap100

watchguard · ap300_firmware (up to 2.0.0.10)vulnerable

References (2)

http://seclists.org/fulldisclosure/2018/May/12

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2018/May/12

Mailing ListThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs